Lucene search
+L

880 matches found

CNVD
CNVD
added 2021/10/09 12:0 a.m.46 views

WordPress Better Find and Replace plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Better Find and Replace plugin suffers from...

6.1CVSS6AI score0.00827EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/10/09 12:0 a.m.33 views

WordPress plugin User Registration cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers.The WordPress plugin User Registration has a cross-site scripting vulnerability that stems from the lack of proper validation ...

5.4CVSS1.5AI score0.0062EPSS
SaveExploits3References1
CNVD
CNVD
added 2021/10/09 12:0 a.m.40 views

Bosch Rexroth IndraMotion Mlc Cross-Site Scripting Vulnerability

The Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robot control.A cross-site scripting vulnerability exists in the Bosch Rexroth IndraMotion Mlc, which stems from the lack of proper validation of client-side data by the WEB application. An attack...

10CVSS2.3AI score0.00629EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/07 12:0 a.m.11 views

Jeecms 跨站脚本漏洞

Jeecms is China's Jinlei Technology Development Jeecms company's set of content management system CMS developed using the Java language. A cross-site scripting vulnerability exists in JEECMS, which originates from the product's /member-vipcenter.htm page that does not validate user input data. An...

5.4CVSS5.6AI score0.00581EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.7 views

Bosch Rexroth IndraMotion Mlc 跨站脚本漏洞

The Bosch Rexroth IndraMotion Mlc is a new device that combines motion and logic control, as well as robot control.A cross-site scripting vulnerability exists in the Bosch Rexroth IndraMotion Mlc, which stems from the lack of proper validation of client-side data by the WEB application. An attack...

10CVSS5.3AI score0.00629EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.9 views

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress WooCommerce plugin suffers from a cross-sit...

6.1CVSS5.4AI score0.00827EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.8 views

WordPress CM Tooltip Glossary插件跨站脚本漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A cross-site scripting vulnerability exists in the WordPress plugin CM Tooltip Glossary, which stems fro...

5.4CVSS5.4AI score0.00624EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.8 views

Maccms 跨站脚本漏洞

Maccms is a PHP-based content management system CMS for film and television. A cross-site scripting vulnerability exists in Mccms10, which stems from the fact that the nickname in the editing function under the Member module of the product fails to properly validate user input data. An attacker c...

5.4CVSS5.5AI score0.0052EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/09/29 12:0 a.m.6 views

UCMS 跨站脚本漏洞

UCMS is a content management system written in PHP. A security vulnerability exists in UCMS, which originates from a stored cross-site scripting XSS vulnerability in ucms index.php. An attacker can exploit this vulnerability to execute client-side code...

5.4CVSS5.6AI score0.00503EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/09/29 12:0 a.m.37 views

PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability (CNVD-2021-76088)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS that stems from the failure of the website field of the product's podcast comment feature to properly...

6.1CVSS6.3AI score0.00651EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/27 12:0 a.m.9 views

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin TranslatePress, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute...

4.8CVSS5.1AI score0.05432EPSS
SaveExploits5References5
CNNVD
CNNVD
added 2021/09/16 12:0 a.m.6 views

Ec-cube 跨站脚本漏洞

Ec-cube is an open source e-commerce system from the Japanese company Ec-cube. EC-CUBE suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side code...

6.1CVSS6.1AI score0.00773EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/09/15 12:0 a.m.36 views

IBM Financial Transaction Manager Cross-Site Scripting Vulnerability (CNVD-2021-71255)

IBM Financial Transaction Manager is a financial transaction manager from IBM Corporation. A cross-site scripting vulnerability exists in IBM Financial Transaction Manager, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the...

5.4CVSS3.6AI score0.00495EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.7 views

WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A security vulnerability exists in the WordPress plugin WP Courses LMS, which stems from the WP Courses LMS...

4.8CVSS5.5AI score0.00617EPSS
SaveExploits2References2
CNVD
CNVD
added 2021/09/11 12:0 a.m.25 views

WordPress plugin cross-site scripting vulnerability (CNVD-2021-100233)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS6.2AI score0.00895EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.6 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

6.1CVSS6.1AI score0.00938EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.8 views

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . The WordPress Post Title Counter plugin suffers from a...

6.1CVSS5.4AI score0.00895EPSS
SaveExploits1References4
Huntr
Huntr
added 2021/09/09 1:17 p.m.9 views

Cross-site Scripting (XSS) - Reflected in universaloj/uoj-system

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.5AI score
SaveExploits0
Huntr
Huntr
added 2021/09/09 7:58 a.m.13 views

Cross-site Scripting (XSS) - Reflected in vfleaking/uoj

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
SaveExploits0References1
Huntr
Huntr
added 2021/09/09 7:48 a.m.8 views

Cross-site Scripting (XSS) - Reflected in podcastgenerator/podcastgenerator

✍️ Description Cross-site Scripting XSS refers to client-side code injection attack wherein an attacker can execute malicious scripts into a legitimate website or web application. XSS occurs when a web application makes use of unvalidated or unencoded user input within the output it generates. The...

2.2AI score
SaveExploits0References1
Rows per page
Query Builder